When phishing attacks infiltrate a popular messaging app like Microsoft Teams, organizations in industries such as healthcare must ramp up their cybersecurity training for providers and IT staff.
A type of phishing vulnerability called Insecure Direct Object Reference (IDOR) exposes assets of a website or server through manipulation of URL parameters, according to Scott Caveza, staff research engineer at cybersecurity firm Tenable. This vulnerability affected Teams because cyberattackers are able to swap external and internal IDs.
“Obtaining credentials is the nirvana state for threat actors…
A type of phishing vulnerability called Insecure Direct Object Reference (IDOR) exposes assets of a website or server through manipulation of URL parameters, according to Scott Caveza, staff research engineer at cybersecurity firm Tenable. This vulnerability affected Teams because cyberattackers are able to swap external and internal IDs.
“Obtaining credentials is the nirvana state for threat actors…
